[SECURITY] Fedora 20 Update: e2fsprogs-1.42.12-2.fc20

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-2279
2015-02-18 23:40:14
--------------------------------------------------------------------------------

Name        : e2fsprogs
Product     : Fedora 20
Version     : 1.42.12
Release     : 2.fc20
URL         : http://e2fsprogs.sourceforge.net/
Summary     : Utilities for managing ext2, ext3, and ext4 filesystems
Description :
The e2fsprogs package contains a number of utilities for creating,
checking, modifying, and correcting any inconsistencies in second,
third and fourth extended (ext2/ext3/ext4) filesystems. E2fsprogs
contains e2fsck (used to repair filesystem inconsistencies after an
unclean shutdown), mke2fs (used to initialize a partition to contain
an empty ext2 filesystem), debugfs (used to examine the internal
structure of a filesystem, to manually repair a corrupted
filesystem, or to create test cases for e2fsck), tune2fs (used to
modify filesystem parameters), and most of the other core ext2fs
filesystem utilities.

You should install the e2fsprogs package if you need to manage the
performance of an ext2, ext3, or ext4 filesystem.

--------------------------------------------------------------------------------
Update Information:

Changes e2fsck.conf so that for filesystems with time-based check intervals set in the superblock, these time-based checks will work again.  You may need to wait through an e2fsck on your next reboot in this case.
New upstream release
Security fix for CVE-2015-0247
--------------------------------------------------------------------------------
ChangeLog:

* Tue Feb 17 2015 Eric Sandeen <sandeen at redhat.com> 1.42.12-2
- Fix use after free (#1192861)
- Fix time-based fsck if set in superblock (e2fsck.conf, #963283)
* Thu Feb  5 2015 Eric Sandeen <sandeen at redhat.com> 1.42.12-1
- New upstream release
- Security fix for CVE-2015-0247
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1187032 - CVE-2015-0247 e2fsprogs: ext2fs_open2() missing first_meta_bg boundary check leading to heap buffer overflow (oCERT-015-002)
        https://bugzilla.redhat.com/show_bug.cgi?id=1187032
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update e2fsprogs' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------